Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          87OB4uoAdzKQJWzSKEmtu62sOSqd6x19zdey6K7TKo4=
Subject key identifier:   4D:EF:A0:F5:CE:DE:C5:79:90:35:A1:B9:FF:D3:A4:DB:64:6E:08:1D
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       01A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          01A5
Signing time:             Mon 04 Aug 2025 04:39:12 +0000
Manifest this update:     Mon 04 Aug 2025 04:39:11 +0000
Manifest next update:     Wed 06 Aug 2025 04:39:11 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: K3CUz5j92y4j8Z3G1Y9L7CWSGOdxUAg1wMMv+g2bFmQ=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Aug  4 04:39:11 2025 GMT
            Not After : Aug  6 04:39:11 2025 GMT
        Subject: CN=68903970-0132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:95:2c:fc:f4:0a:d1:97:df:94:9b:f7:96:
                    1b:30:0b:86:3e:b7:29:80:6e:f7:d8:cd:bd:65:76:
                    3f:04:22:bb:11:b7:30:44:73:e5:64:57:e3:43:b4:
                    06:4e:7f:bf:78:72:51:96:33:34:24:16:c7:a9:7c:
                    fe:00:2b:3f:75:6d:e8:49:94:7f:d0:cd:43:f5:ce:
                    f3:74:d9:be:36:8a:af:4f:58:96:6a:8d:34:f2:75:
                    07:16:e3:e0:34:cd:8c:95:59:68:8a:01:d4:91:78:
                    05:80:9e:73:73:5a:91:99:f3:f7:26:c4:c1:2b:60:
                    d3:f3:12:71:2f:3a:39:fe:74:db:5a:a8:fa:9f:f8:
                    e6:7e:35:d6:e4:88:77:4a:f9:38:16:ba:47:08:11:
                    3d:1a:5e:0b:05:69:93:49:bd:b1:a6:9e:0e:9f:84:
                    a3:48:35:7e:54:7d:97:fc:79:4e:86:e8:e6:23:54:
                    ae:b3:fd:16:39:43:57:04:e4:ef:29:10:ae:42:c8:
                    e7:8e:ea:ed:7d:32:fc:98:29:3a:2f:39:52:18:70:
                    b9:27:d6:07:1d:f2:7c:b4:65:d1:4b:1a:94:e9:3a:
                    af:3d:0e:d4:f2:51:7a:f8:d7:76:c5:f8:b1:0b:b9:
                    b8:54:c8:57:ec:d2:db:82:ee:73:04:01:41:91:6b:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EF:A0:F5:CE:DE:C5:79:90:35:A1:B9:FF:D3:A4:DB:64:6E:08:1D
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:90:0d:c8:89:7f:a1:83:87:c2:45:74:28:31:b4:16:9f:
         49:71:b6:cc:11:fc:39:ce:fc:9b:62:53:d9:97:c4:29:ba:fe:
         29:cd:dd:71:5a:eb:06:b2:55:6f:d8:3f:95:1b:8a:ba:e2:e7:
         7e:c7:57:93:9b:79:ac:f7:7d:8d:ae:43:66:87:79:f5:ee:62:
         c0:97:22:f3:4e:de:89:ec:a1:a6:b5:73:57:fe:05:9b:39:fb:
         8c:5a:31:5a:83:3c:bb:92:24:1e:83:d1:5e:c1:b8:bd:bf:bc:
         ee:e8:10:9c:41:6f:ea:fb:12:f8:f0:39:f7:9a:fb:00:fb:97:
         af:ff:67:82:02:a9:bf:6c:62:ea:58:48:bf:e6:85:0a:aa:a9:
         ac:22:31:b6:62:54:40:ed:12:ff:a5:80:2d:46:e8:61:74:42:
         33:43:6a:f2:62:1c:32:e8:75:f5:a7:37:35:31:4c:d8:1e:58:
         cf:d6:e4:1f:b6:29:a6:88:25:1d:d4:5c:8d:26:0f:76:7c:fa:
         06:87:4e:75:07:d8:4d:79:7c:6b:7e:62:4c:c7:0e:6c:69:80:
         c8:17:70:87:20:e9:f9:9c:8f:b7:1b:0f:3e:c5:87:ee:e4:00:
         69:ef:98:f1:14:48:e2:4f:c9:76:f9:ea:26:ec:2b:ce:ca:08:
         4b:3f:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:47 2025 by rpki-client